Skip to content
OpenAdvisories
High · 7.8 CVE-2021-43025 EUVD-2021-29979GHSA-4cpj-4r5w-xhvc

Adobe Premiere Rush SVG File Memory Corruption Remote Code Execution

Published Dec 20, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Adobe Premiere unspecified – ≤ 1.5.16, unspecified – ≤ None —

References